CVE-2016-7170

Name of the Vulnerable Software and Affected Versions QEMU (aka Quick Emulator) (affected versions not specified)

Description The issue allows local guest OS administrators to cause a denial of service. This can be achieved through vectors related to cursor.mask[] and cursor.image[] array sizes when processing a DEFINE CURSOR svga command, resulting in an out-of-bounds write and a QEMU process crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.